DESIGN OF LIBRARY INFORMATION SYSTEM BASED ON FRAMEWORK CODE IGNITER CASE STUDY OF INSTIDLA

The purpose of information systems (IS) security behavior, represented by the difference between work and personal purpose, has been neglected in the research of user's IS security behavior. This is especially important for the organizations that allow or inevitably allow their employees to do personal tasks during work hours, because it may bring big threats to an organization's IS. Unfortunately, few empirical studies have examined if different behavioral purpose, typically, work/personal purpose, affects users' IS security behavior decision. Based on boundary theory and the idea of multidimensional rationality, we argue that people demarcate a psychological boundary for work and personal usages of IS and thus apply different rationalities to make IS security-related decisions. Our empirical investigation indicates that in a work usage context, people apply rule-based rationality and therefore are more influenced by mandatoriness and facilitating conditions. Whereas in a personal usage context, people apply outcome-based rationality and therefore are more concerned with task benefits and costs. The findings imply that organizations and vendors may devise different measures to ensure users' IS security behavior in different contexts.

Protection motivation theory (PMT) is one of the most commonly used theories to examine information security behaviors. Our systematic review of the application of PMT in information systems (IS) security and the comparison with its application for decades in psychology identified five categories of important issues that have not yet been examined in IS security research. Discussing these issues in terms of why they are relevant and important for IS security, and to what extent IS research has not considered them, offers new research opportunities associated with the study of PMT and IS security threats. We suggest how future studies can approach each of the open issues to provide a new road map for quantitative and qualitative IS scholars.

An Information System (IS) security programme consists of several essential security controls. In order to verify and maintain the effectiveness of an IS security programme, it is pertinent to identify how security controls are compared to each other in terms of their practical implications. This study reports the results from an experience survey to offer insights of the roles of security controls in IS security programmes. Four clusters of security controls were identified with technical security controls (such as authentication and confidentiality) being high on respondents' perceived importance. An approach to develop SAI with weighted security controls is explained to help security administrators conduct security assessments. The results of this study contribute to IS security budget planning and resource allocation. Managerial implications are also reported.

What are the key topics for Information Systems (IS) security researchers? How have these topics been changing, and what topics are emerging to offer new opportunities for research? We address these questions by analyzing the abstracts of 261 articles focusing on IS security that have appeared in leading IS journals and journals devoted to this area. Using Latent Semantic Analysis (LSA) to analyze the text of these abstracts uncovers five primary research topics: Security Design & Management, Business Operations Security, Behavioral Aspects, Authentication & Integrity Controls, and Prevention & Detection. These five primary topics are aggregates of more granular topics that are utilized to find trends to understand the changing complexion of IS security research. Our study contributes by developing the key topics and their trends in this area using an analytical and replicable method to synthesize the existing research.

HOW MUCH ICT SECURITY HAS IMPROVED DURING THE LAST DECADE

Ensuring information security in public sector information systems is now more important than ever. Advances in technology and information have not only made daily life easier, but also made the opportunities for cybercrimes vast and inevitable. This study aims to create a framework for evaluation that measure the maturity level of information security in information systems by integrating existing frameworks, NIST Cybersecurity Framework (CSF) and COBIT 2019. The result of this framework development is implemented in a public sector organization called PT XYZ, which has an information system as a tool to assist in the implementation of public services. The Capability Maturity Model Integration (CMMI) method is used to calculate the maturity level. The implemented approach resulted in information security maturity evaluation framework for information systems. This framework includes 118 activities which are divided into 23 categories. The distribution of the integration of the two frameworks contributes 61% activities, the NIST CSF contributes 8% and the COBIT 2019 framework contributes 31% activities. The measurement result of the information security maturity level in the information system at PT XYZ shows that all functions are at level 1 or the initial level. PT XYZ's low information security maturity reveals the critical need for stronger data protection and system resilience. This study introduces a novel approach to demonstrating a practical methodology for integrating two frameworks. The resulting framework enables public sector organizations to assess their security posture, identify areas for improvement, and enhance resilience against cyber threats, strengthening public service and safeguarding data.

Security of Organizations' Information Systems (IS) and the Auditors: A Schematic Study

Even though the human component has been recognized to have a crucial role in information systems (IS) security, the human issues have not received much attention. Recently a few approaches aimed at minimizing human‐related faults in the area of IS security have been put forward. This paper analyses different approaches aimed at minimizing user‐related faults. The existing approaches will be analysed from the viewpoint of their theoretical background, the research approaches employed, the research objectives and the organizational role of IS security. As a result, a new taxonomy, a comparison and critical analyses of the strengths and weaknesses of state‐of‐the‐art approaches shall be presented. Moreover, several issues that future research should explore and practitioners should consider when applying the results of the existing research are suggested.

Management of information systems (IS) security in organizations has been hampered by the apparent lack of inclusion of organizational security objectives in the traditional strategic planning process. In order to improve IS security strategic planning, we argue that there should be a renewed emphasis on security planning objectives. In this paper we present two sets of objectives – fundamental and means. We then define an evaluation mechanism for assessing the security posture of a firm. Based on case work in healthcare, we illustrate the usefulness of the security evaluation method for designing enterprise security.

The relationship between abusive supervision and employee workplace deviance has received much attention. Conceptualizing information systems (IS) misuse as a form of workplace deviance, the literature on IS security lacks a theoretical and empirical investigation of the relationship between abusive supervision and employee IS misuse. Drawing on retaliation, displaced aggression, and neutralization, we develop and empirically test a research model of the relationships among abusive supervision, neutralization, and two types of employees’ IS misuse. Results of a two-stage survey of 203 responses showed that when individuals perceived abusive supervision, they were likely to invoke the metaphor of the ledger as a neutralization technique to rationalize their engagement in IS misuse. Our results also reveal that employees’ reactions to abusive supervision could be influenced by their tenure with supervisor. These findings contribute to the IS security field and provide important guidance for learning how leaders influence employees’ IS security behaviors.

Confidentiality, integrity and availability, while being key requirements for ensuring security, have had limitations in providing an integral security model that incorporates the benefits of all predominant designs. Heeding to the call that security models cater to unique operational characteristics of individual firms, this paper presents a deep structure framework of information systems (ISs) security. The framework incorporates three models—representational model, which identifies subsystems within an organization; state-tracking model, which ensures that different states trace IS security in the real world;nd the decomposition model, which defines specific external events that are a stimuli to changes in internal events. In a final synthesis, the paper presents a deep structure-based conceptual clarity that manifests the meaning of dynamic, custom-fit and flexible IS security solutions.

In 2017, services at the Indonesian Institute of Sciences Center for Appropriate Technology Development, especially in the training registration administration section, had not been computerized so that data was piling up and difficult when the data was needed. Based on the existing problems, the approach taken is to analyze and design a training information system and implement it into an application form that is used to support the delivery and management of training and education programs in helping plan, develop and provide training to employees, communities, and other stakeholders. other interests. So it is necessary to develop an information system that can be personalized, and adaptive so that it can be adjusted for prospective training participants. The development method uses the PHP programming language, the CodeIgniter Framework with the concept of Model, View, Controller (MVC), modeling using the Unified Modeling Language (UML), MySQL database, and the Unified Process (UP) work method. The modules contained in the training information system include the Participant module, the Institution module, the Resource Person module, the Service User module, and the External Services module.

An integrative study of information systems security effectiveness

Risk management is today a major steering tool for any organization wanting to deal with Information System (IS) security. However, IS Security Risk Management (ISSRM) remains difficult to establish and maintain, mainly in a context of multi-regulations with complex and inter-connected IS. We claim that a connection with Enterprise Architecture Management (EAM) contributes to deal with these issues. According to our research agenda, a first step towards a better integration of both domains is to define an EAM-ISSRM conceptual integrated model. To build such a model, we will improve the ISSRM domain model, a conceptual model depicting the domain of ISSRM, with the concepts of EAM. The contribution of this paper is focused on the improvement of the ISSRM domain model with the concepts of TOGAF, a well-known EAM standard.

Information technology development brings a very broad impact on human life. With this Model View Controller (MVC) concept, information system development could be developed in accordance needs of the user’s information system development and be able to adapt the development in the organization. Needs of fast and precise and adaptive information system information is needed in this modern era when everything needs to be fast. Faculty of computer science (FIK) Universitas Pembangunan Nasional Veterans Jakarta (UPNVJ) as one work unit under the government agency, has State-owned inventories to support all activities to carry out the Tri Dharma or the higher education pillars, especially in the field of education. The state-owned inventories or devices are available in FIK such as monitors, printers, LCD, mouse, etc. For continuity of this educational process, the state-owned inventories must be maintained. Therefore, in this research, the researchers will develop an information system to document the state-owned inventory records for helping the management of the state-owned inventories in the faculty of computer science at UPN Veteran Jakarta. The information system was built using the waterfall method and using the PHP programming language and MySQL database running on a server. This information system provides features to manage users, manage components, access system logs, access system settings, manage devices, manage the location, and access reports. The system that has been developed has also passed the eligibility assessment for all aspects of both visual communication aspects, software engineering aspects, and usability aspects.